Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/51/4957a4-ce59-4315-9976-dc5ec748f6a5/1/HeTA5T3W8Jf9wH5q7sjOGuTtvyE.roa
File: HeTA5T3W8Jf9wH5q7sjOGuTtvyE.roa (raw, json)
Hash identifier: s8St300LUPbIR2XkOpqQyyDtbU+LI5eCqGLTOPxKko0=
Subject key identifier: 1D:E4:C0:E5:3D:D6:F0:97:FD:C0:7E:6A:EE:C8:CE:1A:E4:ED:BF:21
Certificate issuer: /CN=63e916717ab11cccf11ef1fb5c12ee41950fad9b
Certificate serial: 0198D85CEFB4A43E54659C27D67155C9FD8F
Authority key identifier: 63:E9:16:71:7A:B1:1C:CC:F1:1E:F1:FB:5C:12:EE:41:95:0F:AD:9B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Y-kWcXqxHMzxHvH7XBLuQZUPrZs.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/51/4957a4-ce59-4315-9976-dc5ec748f6a5/1/HeTA5T3W8Jf9wH5q7sjOGuTtvyE.roa
Signing time: Sat 23 Aug 2025 19:17:05 +0000
ROA not before: Sat 23 Aug 2025 19:17:05 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 215614
IP address blocks: 85.202.203.0/24 maxlen: 24
2a06:de01:400::/38 maxlen: 48
2a0e:97c1::/48 maxlen: 48
2a10:2f00:167::/48 maxlen: 48
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/51/4957a4-ce59-4315-9976-dc5ec748f6a5/1/Y-kWcXqxHMzxHvH7XBLuQZUPrZs.crl
rsync://rpki.ripe.net/repository/DEFAULT/51/4957a4-ce59-4315-9976-dc5ec748f6a5/1/Y-kWcXqxHMzxHvH7XBLuQZUPrZs.mft
rsync://rpki.ripe.net/repository/DEFAULT/Y-kWcXqxHMzxHvH7XBLuQZUPrZs.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 24 Aug 2025 23:01:59 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:d8:5c:ef:b4:a4:3e:54:65:9c:27:d6:71:55:c9:fd:8f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=63e916717ab11cccf11ef1fb5c12ee41950fad9b
Validity
Not Before: Aug 23 19:17:05 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=1de4c0e53dd6f097fdc07e6aeec8ce1ae4edbf21
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b3:a6:03:7b:60:cb:5e:f3:21:6c:75:41:52:93:
50:37:24:5c:12:e7:c6:d9:92:96:dc:fa:29:b4:2c:
c2:37:e0:e6:ce:fb:7d:aa:22:23:6c:e3:98:2b:88:
97:d8:c8:09:4e:b7:c0:25:fb:17:24:38:c7:7d:66:
65:9c:cb:27:ea:bc:07:51:7a:b0:13:2c:f0:6d:64:
4f:a1:b0:2e:39:84:b2:ea:f1:fa:b7:e9:3e:c1:0d:
52:53:68:c8:a2:24:a7:24:d7:ed:5e:1c:a1:0b:f0:
9a:98:85:f3:97:a3:fa:ab:02:28:4b:8d:86:79:02:
00:fc:ec:1c:61:85:0c:6a:87:b1:b1:76:86:a0:88:
c2:f5:2f:c8:af:b4:69:6a:6d:6a:da:e6:e9:d6:f9:
1d:a2:0d:91:48:31:cd:ca:20:f6:92:28:5b:1e:6c:
b1:44:e9:84:aa:40:45:ea:70:a0:a1:45:f0:07:28:
e6:65:0f:73:99:58:6b:af:13:9a:34:40:a8:d8:00:
fc:9d:ec:15:ab:b8:27:23:20:a9:ce:49:3a:af:17:
47:47:68:0d:32:f3:b1:ea:c6:10:bd:ec:02:07:4f:
e6:2a:dd:1f:60:2e:ab:63:73:12:83:bf:39:56:f3:
be:58:97:a4:1d:5a:85:01:2f:06:07:f6:82:7b:c5:
58:a3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
1D:E4:C0:E5:3D:D6:F0:97:FD:C0:7E:6A:EE:C8:CE:1A:E4:ED:BF:21
X509v3 Authority Key Identifier:
keyid:63:E9:16:71:7A:B1:1C:CC:F1:1E:F1:FB:5C:12:EE:41:95:0F:AD:9B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Y-kWcXqxHMzxHvH7XBLuQZUPrZs.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/51/4957a4-ce59-4315-9976-dc5ec748f6a5/1/HeTA5T3W8Jf9wH5q7sjOGuTtvyE.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/51/4957a4-ce59-4315-9976-dc5ec748f6a5/1/Y-kWcXqxHMzxHvH7XBLuQZUPrZs.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
85.202.203.0/24
IPv6:
2a06:de01:400::/38
2a0e:97c1::/48
2a10:2f00:167::/48
Signature Algorithm: sha256WithRSAEncryption
1b:7f:6b:be:b8:c4:13:3d:ba:fb:89:89:09:1e:91:d4:60:fb:
28:2c:0e:b7:e9:40:8c:a8:aa:ca:24:74:c6:4b:7a:32:09:49:
94:17:a9:11:b7:d8:39:ad:7d:9e:d6:3e:7c:45:59:67:07:2d:
e2:68:a4:98:cd:3e:42:6e:3c:02:e8:36:dd:cf:ce:36:ce:a3:
69:10:c0:a3:b0:6f:2c:ae:2f:55:09:26:4c:16:ff:97:fa:c0:
fd:b2:31:f2:ae:5d:b4:32:85:72:37:59:11:88:6a:6c:64:20:
7c:f8:10:b4:f4:73:a0:b3:fb:1a:e4:f9:82:e6:04:2f:db:73:
d8:11:26:25:c1:e3:33:cb:db:b4:ff:1d:04:7a:54:94:8a:be:
80:92:f5:3b:e3:ec:cc:17:0e:c0:b6:15:a9:ba:cb:85:66:25:
fa:29:4a:75:86:33:96:de:ab:36:e1:2f:1c:f6:cc:a4:39:a4:
09:77:88:f2:85:b0:dd:cf:0b:05:d7:ef:ae:5e:9c:01:e6:fa:
f4:2d:93:4a:39:72:fb:c7:99:f6:3c:30:95:a0:db:3d:90:b5:
f8:e6:cc:85:ca:86:ea:8e:60:05:6c:1b:46:7a:28:30:d1:ec:
e4:9d:1c:0e:a2:ce:d8:7c:49:d9:2e:19:1d:94:51:bf:46:67:
a3:e0:9d:78
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Aug 24 08:11:04 2025 by rpki-client